2026-08-07 归档

今日共收录 1483 条安全情报,包含 647 个 CVE,430 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-08-05 发布INFO

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability ...

CVE-2026-20289

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privilege

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands on the ...

CVE-2026-20288

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with&nb

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security revie...

CVE-2026-20273

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security revie...

CVE-2026-20271

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security revie...

CVE-2026-20270

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security revie...

CVE-2026-20269

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security revie...

CVE-2026-20268

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underly...

CVE-2026-20200

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with lo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site scrip...

CVE-2026-20198

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an aut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to ...

CVE-2026-20124

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters.

CVE-2026-17630

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitive host files via Docker-based MCP servers due to incomple...

CVE-2026-17626

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitiv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP server con...

CVE-2026-17623

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edit...

CVE-2026-8400

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, when following HTTP r...

CVE-2026-70605

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.6, 40.9.0, 41.1.1, and 42.0.0-beta.1, shell.openPath() did ...

CVE-2026-70603

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.6,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the native autofill p...

CVE-2026-70600

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron us...

CVE-2026-70597

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

Ghost is a Node.js content management system. From 6.26.0 until 6.54.1, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated us...

CVE-2026-70595

Ghost is a Node.js content management system. From 6.26.0 until 6.54.1, a validation issue allowed some functionality, s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Deleted or pending answers could be...

CVE-2026-60023

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache An

历史摘要 · 未重新核验 · NVD